India’s transport ministry is evaluating new cybersecurity standards for electric two and three-wheelers following reports of battery exploitation. The proposed AIS 189 and AIS 190 rules aim to secure connected vehicle systems, though manufacturers worry that added compliance costs could impact vehicle affordability for budget-conscious buyers.
The Indian government is moving to strengthen the cybersecurity framework for the electric vehicle (EV) sector, with the road transport ministry currently evaluating the expansion of new safety regulations to include electric two-wheelers and three-wheelers. This initiative follows verified incidents where Bluetooth-enabled applications were exploited to drain batteries in e-rickshaws, raising concerns about the security of connected EV systems.
Proposed Cybersecurity Framework
The government has introduced two automotive industry standards, AIS 189 and AIS 190, which are designed to enhance cybersecurity management and oversee software updates in connected vehicles. While these standards are currently aimed at larger Category M passenger vehicles and Category N commercial vehicles, the government is in discussions with industry bodies, including the Society of Indian Automobile Manufacturers (SIAM), to determine if they should be extended to the L-category vehicles, which includes the country's massive fleet of e-bikes and e-rickshaws.
The implementation of these standards is planned to begin in a phased manner from October 2026. These rules are part of a broader push to standardize safety and performance, complementing recent draft notifications that set rigorous testing requirements for EV batteries, specifically concerning thermal propagation and protection against mechanical hazards.
Challenges for the EV Segment
There is a growing debate regarding the inclusion of smaller electric vehicles in these strict safety norms. Experts from organizations like The Energy and Resources Institute have advocated for a universal approach, noting that because electric two and three-wheelers see widespread daily use in urban areas, their cybersecurity needs are just as critical as those of larger cars.
However, the move presents a significant challenge for the manufacturers of these vehicles. Many e-rickshaw makers are already observing a market shift where consumers are moving away from simpler Bluetooth tracking systems toward more secure, yet potentially more expensive, Internet of Things (IoT) devices. Industry participants have cautioned that mandating high-level cybersecurity compliance could raise the final cost of these vehicles. As India remains a global leader in the adoption of electric three-wheelers—with over 2.56 million registered as of July 2026—any increase in costs may directly affect affordability for the end consumer.
Investors and stakeholders should track the official ministry notification regarding the final scope of AIS 189 and AIS 190. The upcoming dialogue between the government and automobile manufacturers will be the primary monitorable to see whether a middle ground can be reached that improves vehicle security without stalling the growth of the budget-friendly electric mobility segment.